NO SPONSORSHIP - NO OPT
Security Operations Analyst
BILL RATE: $30-40.00/hour
LOCATION: REMOTE
DURATION: 1 YEAR OR LONGER
SELLING POINTS: 24/7 ON-CALL ROTATION security monitoring and alert triage Microsoft security stack Microsoft defender suite and Microsoft sentinel incident response support any healthcare or highly regulated environment preferred
Travel Requirement: Less than 10%
Role Summary
This entry-level role helps protect organizational systems, patient health information (PHI), clinical services, and the clinics supported by Emerge.
The ideal candidate demonstrates strong analytical thinking, attention to detail, intellectual curiosity, and a desire to continuously develop cybersecurity knowledge and technical skills.
This role operates primarily during standard business hours and may occasionally participate in a 24/7 on-call rotation. During a security event, the Security Operations Analyst is expected to respond and participate as needed, including during nights, weekends, and holidays.
Key Responsibilities
Security Monitoring & Alert Triage
Monitor security alerts and events generated by Emerge's Microsoft security stack, including Microsoft Defender Suite and Microsoft Sentinel.
Perform initial investigation and triage of security alerts to identify false positives, benign activity, and potential security incidents.
Escalate validated threats and suspicious activity in accordance with established incident response procedures.
Document findings, investigation timelines, and response actions in ticketing and case management systems.
Incident Response Support
Support the investigation of phishing, malware, ransomware, unauthorized access, insider threat, and other security events.
Collect and preserve evidence necessary for incident analysis and remediation activities.
Assist with approved response and containment activities under established procedures.
Participate in incident response exercises, tabletop scenarios, and post-incident reviews.
Respond and participate as needed during security events, including during nights, weekends, and holidays.
Vulnerability & Security Operations Support
Assist with vulnerability management activities, including review, prioritization, tracking, and verification of remediation efforts.
Support security control validation and operational monitoring initiatives.
Track security findings through resolution and coordinate with internal technology teams as necessary.
Assist with operational security tasks associated with endpoint, identity, email, cloud, and collaboration platforms.
Security Platform Operations
Minimum Qualifications
Bachelor's degree or equivalent practical experience.
0-3 years of experience in cybersecurity, information technology, systems administration, networking, technical support, or a related discipline.
Demonstrated interest in cybersecurity through coursework, internships, research projects, military service, homelab activities, academic competitions, or comparable hands-on experience.
Foundational understanding of cybersecurity concepts including incident response, identity and access management, vulnerability management, endpoint security, and threat detection.
Familiarity with Microsoft Windows operating systems, Microsoft 365 services, and cloud computing concepts.
Strong analytical, troubleshooting, and problem-solving skills.
Excellent written and verbal communication skills.
Ability to manage multiple priorities while maintaining attention to detail.
Ability to learn new technologies and adapt to evolving security requirements.
